Password reset

[LawsHosting]

I understand the username is used from the year dot, but I've noticed recently that my clients use their email address to reset the password, therefore "I do not receive any email" tickets.

Is it time to offer either, the username and/or email address? I understand the email address is less safe...... Just an idea.